Hey guys,
Thanks for all the information in this thread. I've come back to this as the Big Switch switches are now in production.
I have the admin access working via ClearPass tacacs. I am having trouble now with read only access. I have an Enforcement Profile being hit, which is what I want, but it's still allowing Admin access to make changes. Please see below:
I have changed the privledge level to 0 and 1 and 15 and that didn't seem to do anything (broke at 0 as it was lower than what was being requested by Big Switch, which was "1"). When I do a "whomai" on big switch, it shows that I am in the "admin" and "read-only" groups....not sure why.
Anyone figured out how to do this?
Thanks!